Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: Am4MAGRo71EJsrYACK8MYYwbkLuqdOsk0Y6JCWeu/Ag=
Subject key identifier: 53:FF:7D:A0:9A:1B:CE:38:9F:07:1E:BA:54:1F:FF:6E:EE:36:2A:34
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 019873E2B2C573F5C39973C6E3AB0EEB430B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 15A8
Signing time: Mon 04 Aug 2025 07:01:33 +0000
Manifest this update: Mon 04 Aug 2025 07:01:33 +0000
Manifest next update: Tue 05 Aug 2025 07:01:33 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: Glo6gFIEVXHMpRnTpILZ9SUx0MuWhtkXgNGArRlff/k=)
2: C2lOXCmp50JxgRXiUYxe6B0_iZ4.roa (hash: 8UNsnDOqjjcGGg587BCaothe5brbvtl6qwWOiSpwE6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:b2:c5:73:f5:c3:99:73:c6:e3:ab:0e:eb:43:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: Aug 4 07:01:33 2025 GMT
Not After : Aug 5 07:01:33 2025 GMT
Subject: CN=53ff7da09a1bce389f071eba541fff6eee362a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:81:ef:a9:d0:a9:39:83:03:c8:98:a5:b7:
c8:01:dc:c4:3c:e9:ac:c7:11:b5:35:af:10:21:11:
6e:9f:96:78:fb:53:c5:c2:9f:12:98:11:d7:ba:d4:
80:56:07:ec:7e:f0:6b:05:ed:4e:54:2b:99:16:1d:
86:92:95:28:09:13:ab:c1:8f:88:e7:dc:ba:92:09:
f0:24:2b:17:f8:00:09:b3:b5:9c:10:eb:ec:81:e0:
b5:2a:68:57:93:00:ae:de:aa:6a:46:7e:a9:5d:3d:
1d:9d:a3:d1:ba:15:3c:91:8f:27:89:07:96:de:d3:
80:b3:42:d3:3e:55:d3:b8:47:50:c5:67:8b:1b:79:
a3:cd:49:eb:21:96:eb:b7:08:45:88:be:92:76:95:
70:a0:f7:e0:38:8d:c5:1c:44:fc:7c:a4:17:c6:1f:
50:1f:07:3e:f4:19:90:3f:ac:2e:dd:84:6e:24:3a:
9b:c3:31:1e:fa:79:7b:79:0d:f4:0f:6b:e2:ad:f0:
17:f3:c9:53:4d:ec:51:c5:8b:b6:24:5b:88:3f:41:
99:fc:dd:25:19:8f:8c:c5:ed:4f:b1:3f:b3:72:8f:
26:b7:47:ee:5d:36:9a:43:af:fc:e9:7c:da:24:64:
e3:30:39:7a:34:5b:e4:a5:cb:5e:9c:1e:85:71:7d:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:7D:A0:9A:1B:CE:38:9F:07:1E:BA:54:1F:FF:6E:EE:36:2A:34
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:29:43:cd:b6:8f:c1:7c:5e:10:e2:c4:69:75:5d:9d:0b:8d:
55:3b:0a:04:ba:ee:36:a9:5e:3d:6f:57:7c:a2:ad:dd:08:7f:
57:d1:5e:89:3c:c0:bd:dd:f5:49:14:f8:25:1b:a6:47:36:8a:
9a:3b:31:2d:09:49:5d:23:fc:0c:7b:6e:6b:fd:eb:99:c8:a5:
2e:be:fe:04:92:f7:7b:77:e4:ad:0a:92:54:a0:5d:fa:1d:6d:
bf:6f:0b:d3:cb:09:6b:29:0f:03:ce:e8:8b:39:2e:15:d4:b3:
c8:ca:46:48:a7:17:8a:25:a6:da:a1:d0:f9:21:ed:bf:65:4f:
04:f9:e0:02:2d:36:da:ea:3a:93:dd:c1:da:d1:91:4b:65:36:
24:4e:18:17:88:85:ca:37:8e:81:75:86:79:52:c5:9f:67:e0:
36:a1:28:55:ca:28:b4:0a:4f:70:c3:d6:49:14:a9:76:50:e7:
2d:10:71:6b:6c:b7:86:91:80:f4:05:e6:5e:53:df:96:cb:19:
ce:f3:44:2f:a3:44:34:c1:9f:73:7c:ca:c0:69:89:56:c5:ee:
65:d2:0f:07:86:f7:1e:a0:b1:f1:3e:57:5c:ca:fa:38:4f:2d:
fd:dc:c5:39:31:17:0a:df:2d:24:61:4c:fd:14:26:b6:65:ee:
bf:a6:22:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:54 2025 by rpki-client